Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa
File:                     323830343a313462633a3a2f33322d3438203d3e20323633333437.roa (raw, json)
Hash identifier:          U+zSQAUEzHfC1e/OAU0wH62i4rcKsRPGCV14opgBS2E=
Subject key identifier:   29:D0:2F:9F:64:99:7F:4F:31:C4:64:1F:7E:BB:CE:20:17:55:EA:6B
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       1FA9386A9B6075D9525FCF175251E6FE7DAD9905
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:50 +0000
ROA not before:           Thu 06 Mar 2025 18:23:50 +0000
ROA not after:            Thu 05 Mar 2026 18:28:50 +0000
asID:                     263347
IP address blocks:        2804:14bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a9:38:6a:9b:60:75:d9:52:5f:cf:17:52:51:e6:fe:7d:ad:99:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:50 2025 GMT
            Not After : Mar  5 18:28:50 2026 GMT
        Subject: CN=29D02F9F64997F4F31C4641F7EBBCE201755EA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:75:ce:c0:2d:9c:7f:9d:96:da:3e:4e:d4:
                    ff:f5:6a:54:ca:8e:3a:f9:c2:cb:fa:19:a3:ef:91:
                    e6:4d:e6:e0:7c:ad:65:c5:30:6f:0d:87:a0:47:c9:
                    b5:85:e2:fe:a2:ec:ce:50:8f:3d:99:2a:b5:f5:ac:
                    6e:d0:4d:b7:d1:08:c2:7d:8c:ac:f8:0e:09:6e:78:
                    aa:37:9a:3f:22:03:50:e2:bb:94:cb:9a:ff:19:af:
                    3f:7d:58:7c:45:f9:72:3c:4f:59:7a:9f:b7:e3:9c:
                    6c:55:ac:d9:75:f2:ea:3d:c4:d5:59:de:f2:3a:5a:
                    1c:9a:67:c5:76:e7:f9:7b:4f:e3:91:5c:b2:2a:5e:
                    49:ca:c8:a7:27:3c:8d:59:93:48:66:79:a5:dc:0a:
                    81:6a:a9:7c:03:c5:ba:35:55:85:bc:c2:4f:3c:44:
                    04:d8:af:23:61:64:d1:1a:3e:f1:c9:2f:25:e4:9e:
                    4b:89:86:03:c0:98:e7:d2:6f:91:6e:cb:40:95:76:
                    ac:a8:f2:af:04:b7:5a:87:09:94:98:ac:5b:a7:7a:
                    32:85:b2:6d:b5:b5:19:86:91:58:c2:fe:bd:bf:66:
                    6b:e7:87:23:fe:c3:75:8c:d2:df:1e:84:97:56:94:
                    d1:f9:15:a3:1a:9b:fe:0a:65:e7:e6:cd:2b:77:e9:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:2F:9F:64:99:7F:4F:31:C4:64:1F:7E:BB:CE:20:17:55:EA:6B
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:33:36:38:71:1e:a4:97:c4:b4:ef:ab:92:59:85:89:73:40:
         39:35:52:ee:e9:43:98:44:02:af:7c:0b:9f:c0:f9:af:49:fc:
         d6:39:46:9b:29:40:a6:7e:80:c5:d2:46:32:4c:f8:f8:fb:74:
         66:55:19:b8:ce:1f:be:4f:09:69:e0:ac:74:b1:06:a9:75:32:
         ad:ac:de:4b:f9:ea:75:af:b7:62:8b:ff:72:cd:08:0d:ef:bc:
         1a:21:4f:f7:9d:ac:b5:55:1e:d3:25:0c:dc:8e:eb:f9:d4:a5:
         83:f2:8c:70:f3:0f:38:57:0a:0f:22:68:59:2d:58:56:48:15:
         89:35:a3:70:35:c7:f3:b7:fd:b4:16:2f:60:16:c3:a8:f8:21:
         e8:4c:b3:92:a9:52:d5:55:6a:54:5d:83:35:9c:b0:03:f4:35:
         6a:4e:db:ad:6d:28:5e:1b:74:7e:cd:3e:47:0a:ff:03:42:6b:
         cf:59:4d:b9:bb:11:fd:ca:28:43:ee:06:83:cc:d3:3a:18:ce:
         32:36:24:93:6e:68:99:28:51:42:ef:ca:12:49:6e:94:fc:37:
         89:9e:08:32:c6:69:a2:0b:15:cc:7b:3d:b5:c9:c2:0f:89:62:
         1b:42:aa:af:64:47:62:a3:b8:e2:b5:62:fc:43:79:0d:66:76:
         4f:a8:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:23:28 2025 by rpki-client